example.env

# Server Configuration
# APP_MODE: 'development' or 'production' (production enforces HTTPS)
APP_MODE=development
HOST=127.0.0.1
PORT=8080
LOG_LEVEL=info

# TLS/HTTPS Configuration (required in production unless ALLOW_INSECURE_SERVER=true)
TLS_CERT_FILE=
TLS_KEY_FILE=

# Security Overrides (use with caution in production)
ALLOW_INSECURE_SERVER=false
ALLOW_INSECURE_EXTERNAL=false

# Database Configuration
SQLITE_DB_PATH=./data/authy.db
# NOTE: Database encryption is enabled by default for security
# Set to 'true' to disable SQLCipher encryption (not recommended for production)
DISABLE_DB_ENCRYPTION=false

# Migration Settings
# WARNING: Set to 'false' in production, run migrations manually with 'make migrate-up'
AUTO_MIGRATE=true

# Cryptographic Keys (auto-generated by 'make setup')
# IMPORTANT: Do not change these after initial setup - will invalidate existing data
# Generate with: openssl rand -hex 32 (required when DISABLE_DB_ENCRYPTION=false)
DB_ENCRYPTION_KEY=

# External Services
# Interface API Configuration
# URL of the Interface API service
INTERFACE_API_URL=http://localhost:8080
# Token for authenticating with Interface API
INTERFACE_API_TOKEN=